outside of the mesh ● ISTIO_MUTUAL: originate TLS with istio cert ● SIMPLE/MUTUAL: originate TLS with the cert you specified, common if you want to TLS with service outside mesh apiVersion: networking io/v1alpha3 kind: DestinationRule metadata: name: reviews spec: host: reviews trafficPolicy: tls: mode: ISTIO_MUTUAL 1) Generate client and server certificates and keys 2) Create a secret define corresponding virtual service which configuring traffic routes Secure ingress gateway via TLS terminating Using ingress host and secure ingress port to send request: From curl command: need

当然，我们需要调小 gridDim * blockDim 使其远小于 n ，这样才能够减少原子操作 的次数。比如右边就减少了 4096/512=8 倍的原子操作。这就是胡渊鸣所说的 TLS 。 第 8 章：板块与共享内存 到底为什么需要区分出板块的概念？ • 之前说到实际的线程数量就是板块数量 (gridDim) 乘以每板块线程数量 (blockDim) 。 • 那么为什么中间要插一个板块呢？感觉很